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WHAT IS CLAIMED IS : 

1 . A method for installing an application in a trusted operating system, 
comprising: 

enabling selection of an application from one or more applications; 

enabling dragging of a graphical representation of said selected application 
towards a graphical representation of a compartment of said trusted operating system; 

enabling dropping of said graphical representation of said application on said 
graphical representation of said compartment; and 

automatically installing said selected application in said selected compartment 
in response to said dropping of said graphical representation of said selected 
application. 

2. The method of claim 1, further comprising: 

automatically determining one or more supporting resources associated with 
said selected application; 

automatically retrieving said supporting resources; and 

automatically installing said supporting resources within said selected 
compartment. 

3 . The method of claim 1 , further comprising : 

automatically determining access controls for one or more files associated 
with said selected application; and 

automatically setting said determined access controls for said one or more 

files. 

4. The method of claim 3, further comprising displaying said access 
controls along with the files with which said access controls are associated. 

5. The method of claim 3, further comprising modifying said access 
controls in response to a user input. 
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6. The method of claim 2, wherein said automatically determining one or 
more supporting resources comprises automatically selecting one or more library 
files. 

5 7. The method of claim 2, wherein said automatically determining one or 

more supporting resources comprises automatically selecting one or more 
configuration files. 

8. The method of claim 2, wherein said automatically determining one or 
10 more supporting resources comprises querying an executable file of said selected 

application to automatically determine said one or more supporting resources 
associated with said application. 

9. The method of claim 3, wherein said automatically determining access 
15 controls comprises automatically determining access controls for at least one of said 

files based at least in part on the type of the file. 

10. The method of claim 3, wherein said automatically determining access 
controls comprises automatically determining access controls for at least one of said 

20 files based at least in part on the location of the file. 

11. The method of claim 1, wherein said enabling dropping of said 
graphical representation of said application on said graphical representation of said 
compartment comprises enabling dropping of said graphical representation of said 

25 application in close proximity to said graphical representation of said compartment. 
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12. A method for installing an application in a compartment-based trusted 
operating system, comprising: 

displaying a graphical representation of a plurality of compartments of said 
trusted operating system; 

enabling dragging of a graphical representation of said application towards a 
graphical representation of a compartment of said plurality of compartments; 

enabling dropping of said graphical representation of said application on said 
graphical representation of said compartment; and 

automatically installing said application in said selected compartment in 
response to said dropping of said graphical representation of said compartment. 

1 3 . The method of claim 1 2, further comprising: 

automatically determining one or more supporting resources associated with 
said application; 

automatically retrieving said supporting resources; and 

automatically installing said supporting resources within said selected 
compartment. 

14. The method of claim 1 2, further comprising: 

automatically determining access controls for one or more files associated 
with said selected application; and 

automatically setting said determined access controls for said one or more 

files. 

15. The method of claim 14, further comprising assigning a compartment 
label unique to said compartment to each of said supporting resources. 

16. The method of claim 12, wherein said enabling dropping of said 
graphical representation of said application on said graphical representation of said 
compartment comprises enabling dropping of said graphical representation of said 
application in close proximity to said graphical representation of said compartment. 
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17. A graphical software installation tool for installing an application in a 
trusted operating system, comprising: 

a graphical user interface, comprising: 

a display portion displaying at least one compartment of said trusted 
operating system; and 

an application portion comprising a graphical representation of at least 
one application, said graphical representation of said at least one application 
operable to be dragged from said application portion to said display portion, 
wherein dropping of said graphical representation of said at least one 
application on a graphical representation of said at least one compartment 
causes automatic installation of said application in said compartment. 

18. The graphical software installation tool of claim 17, further 
comprising: 

means for automatically determining one or more supporting resources 

associated with said at least one application; 

means for automatically retrieving said supporting resources; and 

means for automatically installing said supporting resources within said at 

least one compartment. 

19. The graphical software installation tool of claim 17, further 
comprising: 

means for automatically determining access controls for one or more files 
associated with said at least one application; and 

means for automatically setting said determined access controls for said one or 
more files. 

20. The graphical software installation tool of claim 19, further 
comprising: 

means for displaying said access controls along with the files with which said 
access controls are associated; and 

means for modifying said access controls in response to a user input. 
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21. The graphical software installation tool of claim 19, wherein said 
means for automatically determining access controls comprises: 

means for automatically determining access controls for at least one of said 
files based at least in part on the type of the file; and 

means for automatically determining access controls for at least another one of 
said files based at least in part on the location of the file. 

22. A method for installing an application in a trusted operating system, 
comprising: 

enabling selection of an application from one or more applications; 

enabling association of said selected application with a compartment of the 
trusted operating system; and 

automatically installing said selected application in said selected compartment 
in response to said association of said selected application with said selected 
compartment. 

23. The method of claim 22, wherein said enabling association of said 
selected application comprises: 

enabling dragging of a graphical representation of said selected application 
towards a graphical representation of said selected compartment; and 

enabling dropping of said graphical representation of said selected application 
on said graphical representation of said selected compartment. 

24. The method of claim 23, wherein said enabling dropping of said 
graphical representation of said selected application on said graphical representation 
of said selected compartment comprises enabling dropping of said graphical 
representation of said selected application in close proximity to said graphical 
representation of said selected compartment. 
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25. The method of claim 22, further comprising: 

automatically determining access controls for one or more files associated 
with said selected application; 

automatically setting said determined access controls for said one or more 

files; 

displaying said access controls along with the files with which said access 
controls are associated; and 

modifying said access controls in response to a user input. 



